Can Splunk be used for Security Event Management ?

SomnathShilimka — Tue, 10 Dec 2013 08:53:36 GMT

Hi All,

I would like to know is Splunk right tool for Security Event Management ?

Regards,

Somnath Shilmkar

Re: Can Splunk be used for Security Event Management ?

kristian_kolb — Tue, 10 Dec 2013 09:17:55 GMT

Yes. Splunk, with the Enterprise Security app is a SIEM. The ES app is an additional package that is place on top of the core splunk installation. You can read more about it here;

http://www.splunk.com/view/enterprise-security-app/SP-CAAAE8Z
http://apps.splunk.com/app/263
http://docs.splunk.com/Documentation/ES

Hope this helps,

topic Can Splunk be used for Security Event Management ? in Security

Can Splunk be used for Security Event Management ?

Re: Can Splunk be used for Security Event Management ?